Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File:                     BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier:          89P6mYlKifClFnyZNU9H8Do4UoC1MytpfVF7/y4uBhk=
Subject key identifier:   E1:BD:80:F5:5F:DB:AF:AA:AE:19:8C:DD:C8:52:84:3C:F6:A6:AD:7B
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer:       /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial:       019E1FEC486632531308AD41BF07A198C453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 06:00:39 +0000
Manifest this update:     Wed 13 May 2026 06:00:39 +0000
Manifest next update:     Thu 14 May 2026 06:00:39 +0000
Files and hashes:         1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
                          2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: nwEPMKU+yWjwo+Opgru+UsGih6hh55i/dciqz09AYg8=)
                          3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:48:66:32:53:13:08:ad:41:bf:07:a1:98:c4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
        Validity
            Not Before: May 13 06:00:39 2026 GMT
            Not After : May 14 06:00:39 2026 GMT
        Subject: CN=e1bd80f55fdbafaaae198cddc852843cf6a6ad7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:83:36:91:11:a9:da:99:d4:00:d7:fa:b8:
                    2f:b4:23:3e:0b:c7:3a:0e:7d:1b:ac:b1:00:39:51:
                    72:be:4b:75:f7:de:5b:20:a3:98:3c:d1:5b:07:3b:
                    68:b4:7c:d0:2f:aa:a4:95:8a:ae:c9:37:ad:ac:cb:
                    12:9f:26:5f:9c:c7:b0:1e:88:a9:46:53:93:17:a9:
                    ae:95:61:c2:88:a2:c2:45:02:fc:97:ba:af:59:fc:
                    0a:9f:31:a2:a5:b7:f2:83:7c:89:de:16:8e:85:20:
                    5e:27:ef:ce:d6:34:1c:29:06:11:3c:11:95:57:13:
                    31:66:cd:53:dd:89:9a:e7:e8:52:0e:92:b6:da:39:
                    0b:8e:b2:97:65:07:d7:06:fc:35:c8:6a:de:ab:c0:
                    2c:9e:1e:d3:d2:61:3d:1f:6f:dc:93:68:c1:df:eb:
                    b2:6f:45:f3:5a:94:b9:b5:c0:46:47:6f:df:d3:f8:
                    16:2d:b3:25:ad:d7:80:8e:9e:42:d9:21:f5:90:df:
                    b0:b9:cb:3f:43:0b:fc:a3:55:ef:cf:ce:4c:5f:b5:
                    09:98:f3:71:f2:25:38:86:ba:81:43:49:33:0f:41:
                    f0:bd:8d:4f:0a:0f:1b:33:8a:22:fc:49:ea:88:ff:
                    10:a4:a2:b9:b0:00:ea:c8:f4:9c:22:81:af:07:78:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:80:F5:5F:DB:AF:AA:AE:19:8C:DD:C8:52:84:3C:F6:A6:AD:7B
            X509v3 Authority Key Identifier:
                keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:ca:99:42:5b:68:8e:43:14:67:51:b6:20:73:f0:2b:25:
         96:dc:2f:0b:d0:09:34:8c:38:61:f7:52:45:c7:e7:f3:44:5b:
         2e:fd:fa:77:e3:55:22:93:83:09:47:44:9f:2b:de:ba:fe:5f:
         9a:11:79:33:41:90:01:82:81:cb:cf:f7:43:c0:3e:dd:df:5a:
         7f:43:c6:11:3f:2e:b9:2d:8c:13:99:44:d9:24:27:fb:3e:e3:
         63:6a:00:6d:f9:fe:7b:5e:20:fc:b9:20:7d:02:f2:ac:2d:eb:
         3f:51:d0:77:55:21:8c:99:86:fb:bc:77:b9:a4:a7:a7:6e:2b:
         6c:d0:cf:fb:b6:34:ff:7c:6e:7f:aa:28:76:76:9c:25:17:c5:
         ab:50:23:c0:32:9e:08:1b:53:0d:94:d5:9d:4f:11:99:10:8b:
         6c:34:04:69:d2:ce:f3:1e:98:e9:90:38:e6:ea:3e:08:07:32:
         66:8c:28:dd:56:f8:a7:41:56:c3:d4:c0:b2:bf:f9:05:a4:9d:
         74:cb:e5:44:48:62:56:4e:2f:b6:99:f2:b6:06:fc:24:5c:99:
         61:01:d7:3d:83:f6:5b:0e:ca:c0:76:26:eb:eb:a3:3a:42:5c:
         9a:16:85:79:ad:a7:a5:0e:75:eb:4b:81:ed:37:f2:b0:ef:e3:
         d0:d4:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:11 2026 by rpki-client